Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
File:                     fxYazxZAB-j32MdxFaWjnQQ2SPg.mft (raw, json)
Hash identifier:          5932KnKMB+/nKgmg2dsRUjxu2syNeFnFQhiNm9oy3lg=
Subject key identifier:   6B:8B:7A:DA:6C:0E:09:98:5C:35:A9:1B:34:82:22:A6:AB:47:3B:52
Authority key identifier: 7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8
Certificate issuer:       /CN=A91E275B/serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
Certificate serial:       3580
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
Manifest number:          9D1F
Signing time:             Sun 04 Oct 2026 15:15:15 +0000
Manifest this update:     Sun 04 Oct 2026 15:15:15 +0000
Manifest next update:     Sun 11 Oct 2026 15:15:15 +0000
Files and hashes:         1: fxYazxZAB-j32MdxFaWjnQQ2SPg.crl (hash: lvBrk9eNL1S08SSdHTFxZI57Qz68zz9DQG+Q56CGtzg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl
                          rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 Oct 2026 15:15:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13696 (0x3580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E275B, serialNumber=7F161ACF164007E8F7D8C77115A5A39D043648F8
        Validity
            Not Before: Oct  4 15:15:15 2026 GMT
            Not After : Oct 11 15:15:15 2026 GMT
        Subject: CN=6ac26d83-2a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:b8:9c:3e:9d:67:93:1b:58:7a:21:79:b1:
                    44:d9:bf:be:9a:fc:1f:6d:2e:9b:9f:26:48:5b:a3:
                    75:2e:e2:f4:f8:f6:18:78:39:87:0f:60:17:a8:46:
                    29:ea:a6:d9:b9:22:c7:94:f0:d2:2f:42:23:85:82:
                    a0:5f:9d:e5:31:4f:33:38:2a:8c:31:64:8c:14:73:
                    38:f7:70:70:28:b5:b0:41:e2:73:17:3a:04:ed:b9:
                    e6:b4:ff:02:04:d0:47:fb:41:07:69:8b:5a:5d:dc:
                    34:b7:71:60:05:fd:4a:7a:90:67:d0:1a:ac:76:af:
                    b1:81:eb:9b:53:bf:c3:b3:bd:14:9a:ea:ba:8c:56:
                    11:97:81:2b:fe:33:77:5f:4e:9c:e3:9b:ff:8e:00:
                    45:40:4e:c4:2c:93:9e:a2:e9:d0:c4:c3:13:ae:c5:
                    7f:ca:38:8f:b3:ef:a2:01:89:de:e0:c6:ec:06:55:
                    02:0c:f6:27:5f:82:48:9e:ce:69:12:b0:f2:2a:aa:
                    b3:55:29:6b:86:06:55:1a:0c:5f:76:16:ab:c7:c2:
                    17:c8:57:bb:4b:55:04:be:c4:6e:71:0c:2f:f8:b3:
                    1f:e2:e9:03:41:05:cd:a7:f2:41:ed:8f:ef:15:25:
                    06:ab:b7:20:6f:a7:aa:b1:c4:bd:f7:c6:85:a5:64:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:8B:7A:DA:6C:0E:09:98:5C:35:A9:1B:34:82:22:A6:AB:47:3B:52
            X509v3 Authority Key Identifier:
                keyid:7F:16:1A:CF:16:40:07:E8:F7:D8:C7:71:15:A5:A3:9D:04:36:48:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fxYazxZAB-j32MdxFaWjnQQ2SPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E275B/AB2022301DA911E2B095C4A408B02CD2/fxYazxZAB-j32MdxFaWjnQQ2SPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:2e:26:72:e2:4c:ad:aa:58:40:1a:ee:29:47:73:47:e1:ec:
         35:30:1f:64:5d:63:52:d1:a5:3c:02:70:ca:13:93:4e:97:3a:
         b5:a9:b6:e0:bd:db:f1:5f:5d:cd:d1:9d:d4:67:b6:a2:e0:81:
         0c:54:e5:b8:17:48:ae:f9:0d:71:90:7d:97:8f:f8:d0:ad:9b:
         bb:55:ec:de:a5:b2:9f:62:66:3d:5f:43:c9:a8:02:46:d9:7e:
         e4:c5:aa:05:c1:ed:df:22:db:d3:2a:cd:e6:78:7f:cc:f8:69:
         c0:35:26:55:e9:6a:6e:56:0d:75:7f:3e:01:37:43:74:37:6c:
         4d:b5:c9:98:b4:4b:43:7f:ed:6e:76:9c:88:c3:fc:15:72:d9:
         f6:3a:be:b5:ff:a6:36:3d:e8:18:38:8e:b1:bb:84:05:24:48:
         e5:c6:51:4c:a5:0c:61:7b:a8:1f:fc:0d:25:71:97:2b:63:be:
         33:38:58:80:ca:a6:6e:43:e9:4f:c8:dc:35:53:8c:2c:ed:06:
         06:14:9a:1f:54:c6:2f:13:70:81:16:f1:90:1c:76:42:b2:1c:
         91:31:c0:c6:84:e7:2b:79:22:2b:1a:2c:00:46:83:90:cd:9a:
         a0:ef:03:31:cc:fb:37:3d:a0:0a:7e:b5:90:55:15:20:bd:dd:
         f1:49:05:af
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTI3NUIxMTAvBgNVBAUTKDdGMTYxQUNGMTY0MDA3RThGN0Q4Qzc3MTE1QTVBMzlE
MDQzNjQ4RjgwHhcNMjYxMDA0MTUxNTE1WhcNMjYxMDExMTUxNTE1WjAYMRYwFAYD
VQQDEw02YWMyNmQ4My0yYTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtxu4nD6dZ5MbWHohebFE2b++mvwfbS6bnyZIW6N1LuL0+PYYeDmHD2AXqEYp
6qbZuSLHlPDSL0IjhYKgX53lMU8zOCqMMWSMFHM493BwKLWwQeJzFzoE7bnmtP8C
BNBH+0EHaYtaXdw0t3FgBf1KepBn0Bqsdq+xgeubU7/Ds70Umuq6jFYRl4Er/jN3
X06c45v/jgBFQE7ELJOeounQxMMTrsV/yjiPs++iAYne4MbsBlUCDPYnX4JIns5p
ErDyKqqzVSlrhgZVGgxfdharx8IXyFe7S1UEvsRucQwv+LMf4ukDQQXNp/JB7Y/v
FSUGq7cgb6eqscS998aFpWTpNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGuLetps
DgmYXDWpGzSCIqarRztSMB8GA1UdIwQYMBaAFH8WGs8WQAfo99jHcRWlo50ENkj4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjc1Qi9BQjIwMjIzMDFE
QTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUItajMyTWR4RmFXam5RUTJT
UGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2Z4WWF6eFpBQi1qMzJNZHhGYVdqblFRMlNQZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
Mjc1Qi9BQjIwMjIzMDFEQTkxMUUyQjA5NUM0QTQwOEIwMkNEMi9meFlhenhaQUIt
ajMyTWR4RmFXam5RUTJTUGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAuC4mcuJMrapYQBruKUdzR+HsNTAfZF1jUtGlPAJwyhOTTpc6tam24L3b8V9d
zdGd1Ge2ouCBDFTluBdIrvkNcZB9l4/40K2bu1Xs3qWyn2JmPV9DyagCRtl+5MWq
BcHt3yLb0yrN5nh/zPhpwDUmVelqblYNdX8+ATdDdDdsTbXJmLRLQ3/tbnaciMP8
FXLZ9jq+tf+mNj3oGDiOsbuEBSRI5cZRTKUMYXuoH/wNJXGXK2O+MzhYgMqmbkPp
T8jcNVOMLO0GBhSaH1TGLxNwgRbxkBx2QrIckTHAxoTnK3kiKxosAEaDkM2aoO8D
Mcz7Nz2gCn61kFUVIL3d8UkFrw==
-----END CERTIFICATE-----
Generated at Mon Oct 5 13:24:28 2026 by rpki-client